Overview

overview

10

Static

static

1

Contract_0...11.exe

windows7-x64

10

Contract_0...11.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Contract_02_21_Copy#11.exe

  • Size

    1.4MB

  • Sample

    230221-1btcnaae6y

  • MD5

    f088ea1be5a341d3492271f45962690c

  • SHA1

    936446b29cc330138b669d303548e34514a42687

  • SHA256

    e7541ad9e7c20ca7fa95fcbc9489fd9fb1f603ddf2f0be9155422c43dfd93380

  • SHA512

    5bbad95bb7d6a20ab42fb16d03c6ebc0ee5900be34a9b16dbcb5bdfd95ea39453380bade7a1bf7133a2bf6f2a1e659f4dbe26cbfa6b2d4b53d7b2628a308196f

  • SSDEEP

    24576:l0otxMzvoAP2eqD9MbjlZJtaTj5L0CUp4kFoHXsCyXju63:6/zvoAP2/RM5t6jvvyXjr

Score
10/10
bumblebee21macatrojan

Malware Config

Extracted

Family

bumblebee

Botnet

21maca

C2

108.62.141.20:443

104.168.140.145:443

51.68.145.171:443

108.62.118.170:443

192.119.72.133:443

23.108.57.201:443
rc4.plain

Targets

    • Target

      Contract_02_21_Copy#11.exe

    • Size

      1.4MB

    • MD5

      f088ea1be5a341d3492271f45962690c

    • SHA1

      936446b29cc330138b669d303548e34514a42687

    • SHA256

      e7541ad9e7c20ca7fa95fcbc9489fd9fb1f603ddf2f0be9155422c43dfd93380

    • SHA512

      5bbad95bb7d6a20ab42fb16d03c6ebc0ee5900be34a9b16dbcb5bdfd95ea39453380bade7a1bf7133a2bf6f2a1e659f4dbe26cbfa6b2d4b53d7b2628a308196f

    • SSDEEP

      24576:l0otxMzvoAP2eqD9MbjlZJtaTj5L0CUp4kFoHXsCyXju63:6/zvoAP2/RM5t6jvvyXjr

    Score
    10/10
    bumblebee21macatrojan

    • BumbleBee

      BumbleBee is a webshell malware written in C++.

      trojanbumblebee

    • Suspicious use of NtCreateThreadExHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks